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Amendments tn the Specifics^ tm 

Please replace paragraph [0004] with the following amended paragraph: 

[0004] In general, if we let F(q") be a finite field, where q is a prime or a prime power, the degree 
of the filed is n and its order is q". A basis for the finite field is a set of n elements b 0 , b„ ... 
[[bn,]] b^W) such that every element A of the finite field can be represented uniquely as a 
linear combination of basis elements: 

. Ai^Sib, [fA - i ^bj] 

Please replace paragraph [0017] with the following amended paragraph: 

[0017] Referring to FIG. 2, in a second embodiment each of the correspondents A and B have a 
respective public key aP represented in terms of basis 0, and bP represented in terms of basis P , 
The first correspondent A transmits its public key aP to the server H which performs the basis 
conversion on the element to a representation basis p 2 and transmits this key [[aPp,]^ to the 
second correspondent B. The second correspondent B also transmits its public key fopMUfifc 
to the server where a basis conversion is performed on the key to the basis 0, of the first 
correspondent. The key bPpi is forwarded to the first correspondent A. Each of the 
correspondents then compute a common key by combining its private key with the other 
correspondents received public key. Thus, A computes abP pi , and B computes baP, 2 . 



Please replace paragraph [0019] with the following amended 



paragraph: 
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[0019] In a third embodiment, again it is assumed that the correspondents A and B operate in 
bases £4h**H£ &jmdj, respectively. The bases fit^a P ,andp 2 may represent any basis. 
Furthermore, we define a field element a such that correspondent A represents the element a in 
terms of the ba*HHb*^,, and correspondent B represents the field element a in terms of 
basisJa. The correspondents make use of a bit string that is a function of a sequence of 
traces of the field element as a shared secret to perform the certain cryptographic operations. 

Please replace paragraph [0020] with the following amended paragraph: 

[0020] In this embodiment ifwe let p be a prime and let q=p* where m 2> 1. Let F q be the finite 
field having q elements and [[Fq»]] F£ the n-dimensional extension. The cyclic group G of 
iim Ea! over [[Fq]]^ is generated by the mapping c(a)^, as [[Fq n ]] F£ and is of order n. 
We may then define the trace function of [[Fq n ]] F^ over F, as 

TrF q n | Fq (a) = 2n(a)- n i:V 
n=o i=o 

Please replace paragraph [0021] with the following amended paragraph: 

[0021] For brevity, the trace function is simply represented as Tr. The traces Tr(a pi ) and 
Tr(a P2)) have the property that the trace of an element a represented in terms of a basis [ [P 1]J fc. 
is the same as the trace of the element a represented in terms of basis [[|J2]] fr. 

Please replace paragraph [0023] with the following amended paragraph: 
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[0023] m general if F(q») is the finite field and F(q) is the ground field over which it is defined, 
the elements of the finite field can be represented in a number of ways depending on the choice 
of basis. Two common types of basis are polynomial basis and normal basis. If [[pi]] & is a 
polynomial basis, then the basis elements may be represented as 1, p, p 2 , .... p"-', where p is a 
root or generator. Assuming the function f(x>0 and f(x) is an irreducible of degree n i.e 
irreducible over the ground field, then, if a field element is given by a = a^p 1 ... + a^p-, the 
trace is given by 

Tr(a)- ao+a.TXM+ajTrfl} 1 ) ... + a^Tr^" 1 ). 

Please replace paragraph [0040] with the following amended paragraph: 

[0040] Referring to FIG. 3, a key agreement scheme shows the correspondents A and B 
operating to bases [ W l and p 2] ] p, m d respectively. The bases [01 and P 2]] fl^r^ may 
represent any basis. Furthermore A and B each have the fbUowtog system paroneters, a .ong 
term private key d and a long-term public key CU-dJ and Qy*f, where P is a point on an 
elliptic curve represented in term, of the respective base,. The correspondent A represent. P in 
terms of the basis [[piJLfij.a.d corresponds B represents P to terms of basis [[32]]^. „ a 
typical Diffie-Hellman key agreement scheme, each of the correspondents A and B generate 
respective ephcmeml private keys k* and k B and compute a corresponding short term (session) 
public keys WV, and k B P „. A and B exchange thcir respective public key* and convert them 
to their own basis. If the correspondents are low power devices, such a, smart cards or the like, 
•hen basis conversion may be performed by an intermediate processor such as described with 
refers to FIGS. 1 »d 2. Alternatively, if the correspondents have sufficient compiling power, 
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then basis conversion may be performed by the correspondents themselves, according to one of 
many basis conversion methods. In any event, after the basis conversion, correspondent A has 
B's public key (k p P P2 ) and B has A's public key (k A P B2 ) pi . A shared secret is computed in 
their respective basis by computing P p2 ) pi = a pi , and k B (k A P pi)p2 = ap2 . Each of the 
correspondents takes a sequence of traces of their respective field element a to derive a common 
bit string. 

Please replace paragraph [0041] with the following amended paragraph: 

[0041] Applying the method to a signature scheme, the correspondent A generates its ephemeral 
public session key kP p , A trace sequence may be constructed, for example, of the x-coordinate 
of kP p , producing a bit string T. The bit string is passed through a hash function g to derive a 
signature component r. A second signature component s^Wdr) is computed, where d is A's 
long term private key. The signature components are transmitted to B for verification. The 
verifier B computes E'ms" P p2 + rs" [[Qa , 2]] = ^ where ^ ^ b ^ ^ ^ 

public key of A in basis 2. This basis conversion could be performed by A using an intermediate 
H as described earlier. B then generates a sequence on the computed value kP p2 , and applies the 
hash function g to derive a value r'. If r'=r, then the signature is verified. 
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